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(54) VPN COMMUNICATION METHOD IN SECURITY GATEWAY DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a VPN communication 
method for a security gateway device that brings a PC accessed 
externally via a WAN into a communication enabled state as a 
virtual terminal under a LAN. 

SOLUTION: This invention provides a VPN communication method 
for the security gateway device 1 03 that interconnects the WAN 
consisting of public channels or the like and the LAN 1 04 through a 
concentration conversion processing. In the case of realizing a VPN 
108 for an external PC 101 connected to the WAN by dialup 
connection with an IPsec protocol, a DHCP communication option is 
integrated with IKE data at an IKE communication before the IPsec 
communication so as to realize designation of a sender IP address 
C that is IPsec-processed in a tunneled IP packet. 
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man wAN^Lxnasd^T^-tx-r-spc* 
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KJt£U h>*'J >y$tlfc I P/tfry Mc^t* I 
P s e cM3£n3iH«7cI P7KI/XCOjf^HI 
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( 2 ) 



• ?- h^x^gBICiitt&VPNjiifl^gsT&oT. 
^-r -wut -y y^tTWA n \z&m L tzftm<D P C \Ztt 
UIPsec/D hnjUctO VPN^HIT^IS, 

I P s e ciimiC5fe5iO I KEjmEMC, DHCPilfl 
t/->3 I K E y— ^ IC#t"a L . h>^'J>y^n 
I P/ty-y Hciitt-S I P s e cMSSn-SjIimTcI 

P7 Fuxamfezmm-rz-t**.')^* ■ y- ho*. 10 

-fgglCiitt-S V P N iim^ft. 
[»jfcjg2] iKEjUfBSlc, -tr+i'J^-< -y— hr> 
x-fg@SHT»LAN«t|^i;-fe:^ r ^>hO I 

LANK7^irXT3MlB^S&©PCIC#J9^T. mFffi 

^guo p c ^mswjc l ANmmTizm^tz v p n am 
-r mmiz&vz v p Njim^ffi. 

[«*«3] NAT^*M^t)-B:TStlfSi1-gPOPC 
ICL ANiHTTfiEffl L T l> 5 -Y^— h I P7 KUX 20 

£ i KEjafsistctt-^u y^-r^-M PTKl^XT 

#1^2 tlfc L A N^^CDlff fH^SP© PCA^©7^t 
X^plSE^VPNjlW^^-r-S-fe + i'J^-Y ■• y-h 
x 'T SB tC *5 •£> V P N iim^&o 

[OOOl] 

LfcL ANi^miHli^^fODWAN (W i d e A r e a 
Network) <t^«i» • £iMl3£rr5 C £1' J: 
Oitt5t+a'Jf • y-^i-fgStifiltSn 30 

y^bfcnaJCDPC^WAN^rfrLT-fe+xU^-T • 
y-Wi'fgttVPN (Virtual Priv 
ate Network, mMMftffi) ilfI2-fr 

ottaijf^ • y- h'>x'fs«tc*j^^vpNjim 

[0 0 0 2] 

-C^^)o it#©PCTM$n5LANH>^-^ 40 

v hizmmr^m^. LANiwANSjuatsy-h 

^x-l-SB^SIC^C^o £fc, LAN©ftSP©PC^ 
^LANKTW^tcr^-feT.T&lCte, $-T#5**)LT 
Ui^DyH^cy-fWy^ittL.. WANIit 
LANBETOSS* (#J*.tfPC) tcT^-trXT-Sdi:!' 

[0 0 0 3] L^L. WAN£Srttl£/1^r-;/ MiS#B<] 

t, mE.miz&mto®&mm-znz>i&titfi&z>. mmte 

®<DWm&£ft-&fr*><D^FlE7?±X$:ffi±1rZ>rzl&lZ 50 
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te. WANtLAN^nt+aUr^ -y— hr> 

i-fgTOSt&o. •v^T-yy^-r-spcic 
pc wgpropo t-fe+i'j^'f -y-hOi-fgi 

CDP,SJTVPNj!«£ff ^^fC, WAN±-Cfi«MfJ:« 
ffl&?llJg#|g3iT#5. VPNIiOfcJ&Oftg 
W^iimyp hn^tLTHS^nTH-SWIi I P s e 
c (Security Architecture f 
or the Internet Protocol) 

[0 0 0 4] ^TIC I P s e c SrfiJffib/cVPNjlffi 

0 4 liW A N£-&tT— h 9— yXfi§§ 

[0 0 0 5] 04 ICfc^T, 1 0 1 li/D/H ^icy^f 
•V^Ty^i^bfc^gRcDPC. 10 2liWAN. 10 

3teWAN 1 0 2 ttlOLAN 1 0 4 St^LTA!*! 

. g&$aj!£?f • y— h^x-f . 104 

H-tr^i'J^^ • y-h^x-f 1 0 3ETCDL AN. 1 

0 5liLAN10 4±©i)--;'!i*, 1 0 6. 1 0 7« 
LAN 1 0 4±<D?7-(T> hPC, 10 8IJPC10 

1 t-fe^i'jT-i' • y— h^xHT 10 3 tCDlf I P s 
e cmm&fTOtzt£>\zm$L2tltzVPN-C$>2>. 

[0 0 0 6] "VfrT >y?&mVfzP C 1 0 1 #LA 
N 1 0 4±CDJg*tCT^-feX-T-5^. -fc^'J^V • 
^-bOx-f 1 0 3t©HTVPNl 0 sSrWiziL. W 

an i o 2_t-?&mMummm.mm&mm-r2>. z\?v 

TWAN 1 0 2±Tjimrt^^gSK • &ST-£&^«fc5 
ICL, LAN 1 0 4g2T©aS*<hiim£?T5. 

[0 0 0 7] ^CJC. I P s e c ffi«£fr-5fc#l£!&B& 
ffi«ft«©«gKOV>T0 5£mt>T«¥ift-r-5. i5B 
WANIC±5»^rWAN^iT$^. 

[0 0 0 8] 05 iCfct^T. PC101. WAN 1 0 
2. -b^i'J^-C • y-FOx-r 1 0 3IJ0 4 t|^«|CD 

[0 0 0 9] PClOltt+aUf^ -y-h^i-f 
1 0 3 L(D2gm-C I P s e c jlftSrfr?*!^. y— 9 

<t) . &^i»ih^<i:<&«iI-r^fcae)©Bif^T;U^UX 
A. H§:iiET)UriUXAtCffl^^®tt^€rW**iI P s e 

«)T-^-r-5^fti:. IKE (IntemetKey 
Exchange) T'o h n^trffl^Tglb^-r^ 

^ffic0 2jid75^-5 o I 

k e t'd hzi)u\zj:^^mmmm^^<D^mm-r 

[0 0 10] ^(C. 06Srffl^T I P s e c ii«tC^>l^ 



TWiWTZo B6HIPsec mmmi&<Dfz&<D't3r^ 

[0 0 11] I P s e ciimSrfrpfc*^^ 2 j&fMTC 
^R^[p]tCliSM^=3^i7i>3 >S A (S e c u r i t y 
Association) £5Slt L&tttUf & 

CD I KE-SA£»;£Lcfc5<hL (S 1 1, S 1 2) , 



( 3 ) ^2 0 0 1 - 1 6 0 8 2 8 

-e-niC/SSjLfcS, 7x-X2C^^T, IPsecI 

(S 1 3) o 7x-X2T I P s e c-SAS»4t-5 
uttfTSfttf (S14) I KEilf§£iS&TU IPs" 
e ciim^BaSS-r^ (S l 5) . Xt7^S HOIK 
E C7x-X2) m{BlZ&\,*T 1 P s e cMiE&ftofz 
a&fc2^MT««sn**a* (81) iC^lTo 
[0 0 12] 

»1] 





p m 




ESP/AH 


IPseciHt^— b* 














m<DM&>&m. espt^surpj 















[0 0 13] flLtt^-K (I P s e ciflt-H) 
lCOV^T«, t+a'Jf^ •y-h'?x1 , l0 3tth> 
^;i/^E-K ( I PW7 h^ttSr^-fc'J >yT-5) T? 
L^ftftnT'^te^CDT. ^TH I P s e ccoifjft^ 

[0 0 14] El 7 I- >^JI/ ; t— h'CD I P s e clflffl 

iztm&^TmAm-z&z* 30 

[0 0 15] S17tC*JViT. PC 1 0 1 , t+aUf-f 
•y-h^i-f 103. LAN104. ^7<T>hP 
CI 06, VPN 1 0 8»04 i^filoOfcWT^-S. 1 
0 Oit I PAxy 

[0016] 07 tc43^T. PC101, j. 'J ^-^ 
■y-h^i-f 103, ?7-f7>hPCl 06OI P 

ICtoTPC 1 0 1 izH^tlti I P7H1/X) „ LA 
N 1 0 4±0^7-f7>hPC 106#><E>VPN108 
Sr^-LT3^i7->3 XD^tlitPC 1 0 1 I: I VfVr 40 
y h^it«r-5«^, JTf7^7>hPC 1 0 6lCi5 
<^T. 2I«tcI P7K1/XR. 9E5feI P7H1/X««A 

cd i p/t^r>y h i o owfrsdn. inm^n-5o -fe+i 

• y— h^x-f 1 0 Z1fiZ.<Drttr v MOO^g 
fit-, VPN 1 0 8£3I£>*i;tPC 1 0 1 5eT<9/1^t 

«a«ca-^t>T i p/^7 h i oo€*7"t'j>n 

-5. tcO I PT KU-Xco^#]IC, i^iSI P7KI/7 
B. ft.9t I PT K U^Affl I P's-y^f+JP^tl-So C 
c7)i:#3S^b/ctS^lCSo*^T*y-tr'J >y£*lfc I P 50 



fcPCioi tt. X!ftbfc««lca6"^v»T*y-fe'J >if 

t>ntz7te> i p/ty>v h i o o £&owu aas-r-s,, 

[0 0 17] 

{f#fi;Tte, WANl 0 2±-r©-?-^©^±tt»i?Sffi 
TtTl^Ai, &< STASIS* h^-^^CDT^-fc: 
LANl 0 4ET©^7-f7>h 
PC 1 0 6<DmWLlZTi7±7.T^>fcli>l,Z. LAN104 
BHTcD^7< 7>hPC 1 0 6KRje (T^-feXWoJ/ 
^fFoT^^-r-tr+iU'^t' 'J 0JAtf8¥ 
bJ-T-5 I P7 FUTsii^VFSltfczya bzul/ • -y-- 1* 

BH^i;awiEtt*«*o. lanio4^7-t^- 

[0 0 18] CO-fe+iUx-f • y— h^x-fSfifltt:* 
tt&VPNffiff^ffiT'te. WAN^LTWe7i' 
-feX-T-5 P C SffiSWfcL ANET®S*t LTiiflnJ 

[0 0 19] #f£BJ«, dCOS^^^fc-rfcJ?). WAN 
*^LT^g|5^^Ti7-fe^-r-5 P C&foMmzh ANE 

x -f gEB IC *3 ft -5 V P N jiffi^S SrHtfrT £ £ <h £ B W 
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[0 0 2 0] 

PNilffi^ftte, &m[H]i&&£*^t>*l*£nsWAN<h 
LANf:©p B lSI8 • ^fflSICtO^-TS-tr^i'J 
• V— h'^x'f gfiKfctt-SVPNjlifB^teT'&o 

(CttL-T IPsec^D Mi;HC«tO VPN$r5IS-r^ 
IS. I P s e c fiffilC&jiO I KEiim^flC. DHCP 
iifI;*y->3>£ I KEx-^Ki&^U h>*U>y 10 

$nfc i vn'rv Hcfctts i p s e c5as$nsinm 

7C I P7FUX©if££IISIT£#ffiX£<«*TU.5. 
[0 0 2 1] Cni3«k0. WAN£;frLT*t.g&^£7^ 
P C ^{SSWiCL AN|ET«^*<»: LTiimnl 

[0 0 2 2] 

Ur-f • y-h'^x'fgfilc&tf&VPNjtft^ftte. 
^Iali|gf«t<»:d^«fi£^tl-5WANiLANt©KS;* 20 

^i^T'WANIC^Lfe^WPClC^bT I P s e 
c7Dt-3JH;,J;0VPNSMt5fig. IPsecI 
fltC^feiEO I KEj1^B#1C, DHCPjl«^y->3 >Sr 
I KEr-flzm&ls* h>*'J>ysntI P/iy* 
Hc:fctt£> I P s e c$fl.32>n-5jH«7t I P7HI/X© 

[0023] zommz^o. tta'jf-r • y— M> 

x'fttlB. ^ TJl'Ty^LfcnSOPCi I P 30 
sec MAT -5 IS. *©PC ©&*SW&?B$te I P7F1/ 
XSMWRTtEfcU LANgaT©^*^©^€r^Si 

[0 0 2 4] »*«2IC|B«©-fe^i»JX'C • y-h 1 ^ 
x-<gStC*5tt^VPNiim^ffi«. W*JSHCfS»CC> 
tti'Jf-f • y- hCx-fiSBtCim-SVPNilfl* 
ffifcfc^T, IKEil«B$(C. t+aUj.< -y-h-i? 
x-fgBETWLANtfBjC-fe^;^ KG) I P7 FUX 

LAN{CTi7-kXT-5^gP©PCtC#J0^T. nSPOP 40 

c ^{g^swtcL an swrFKH^jtv p Nmm&mm.-? 

[0 0 2 5] dCD^jSiCiO. VPN£?t3iL.£:^gR© 

[0026] m^m3izmw.co±^^wr^ • y— f? 
x<gBtc*tt-5vpNa«*ft«. »*3Sifcfe«© 

MiUf^ • y- h^x-f gB^;::fc^:^-5VPNJi«:S• 
8;^;:;fc<AT. NATfidB*ja*^to*Tn»OPCJCL 
ANETTffflLTI ( ^y7-1 , ^-MP7KI/X^I 50 
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KEitmiSICtt-S-U 77-f^-MP7KWfif 
5 nfc L A NS8^<Dfl.g&© P C 6 ®7 ^ -ir7.^pJig 

&v p n mm&mm-tz c 1 1 Lfct>cDT-&-5. 

[0 0 2 7] dO*fi£«C«t6. /7-fC-HP7HI/ 
XTStfiicSnfcLANglJglC. $ftt*?tffibfctJ«- 
P C T^S, © 7 -tr 7. £ pJfigtC-T * <h I* 5 f^ffl 

5. 

[0 0 2 8] KT. *^C0JU5gO^ffil;^)^T. 01 

[0029] (mm<DMm d m 3 «. .*fgia©§&!j£© 

ffi*!ii icfcs-fe^'jyw • y-h^x-rgBicistt* 
VPNjl«^ffitC43tiTfflt^ I KEiimy-^7* — 

[0 0 3 0] H3fcj£*-»9, IKEilfffiUDP (U 
ser Datagram Pr — otocol) /l . 
P (Internet Protocol) £<£ffl LT 
IKEt-^H. ISAKMP (Inter 
net Security-Association a 
nd Key Management Prot— oc 
o 1) 'N^yw^tCl SAKMP^D-H^ft*0& 
fWflTt<ui:Tifi!E2n5. IKEilftte, 

&*m$t.-?z>i&mm <-rr.->x-*. imtiato 
r) t^nic«bx^-r-5jr^# c;x#>y. Re 

s-ponde r) {C«koTff *Dtl-5= *mMCDBmiZ 

UT'f^-*^ hC8«l/fcPC 1 0 1 jjU I n i t i 
atort^O, LAN 1 0 4 _hCD3g*<h LT©;7 ^-f 

7>hPC10 6. 1 0 7 tcT^-trx-r^fcs&tc. -t^ 

a'Jf^ • y- h^x-T 1 0 3 (C I KEii«£MSglU 
■fe^^. Uf-f • y— F^xl" 1 0 3#R esponde 
r tLT I KEilM^ff^. («1) K^ffcJSS©? 

Wf#«tsiESitt, <tmwtmM^m^x i n i 

t iatortResponder <E>ffl-r?S«$&;&<32Jft 
Sn-53&<, -€-n^CD3l@«. I n i t i a t o r &m 
L-. Responderi'Initiator CDJS 

/tt7-i~7> h^ryjUTff^n-S. DHCP (Dyna 
raic Host Configuration Pr 
otocol) i?5'T7>hi:LT©PC101^i 
t^^frottiiLT, IP7HUX. 1r7*yh7 
I P7 HIxXWW^WIS. F*-f =1 
tl£>4^>(£>tM8S: I KEiim<C*5l/^TR e s pond e 
rTfe-S-fe^x'Jx^ • y— r-^x-f 1 0 3#il?it© I 
KET-^T*7"y3><!:LT#W5 1 <IL, I P7 
F \s7.(D^V)mmZ I KEil«(CckoT«5t$tl^SA 
©^il^Dt^A-SdtT'^BS-r^Ct^T-^S., * 
fcDHC P t>UDPCO±fir»C'[5J:Bt"-57'y , J'7-->-3 > 

•fa ha;pfj©T. I KE(ciSa*-^T ! bf?jllft'JP j e<D 

[0031] hi te*3m<Dmmv>wm 1 ic*>n--i> i p 
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s e cfflm<0«l»£*fKiiHBT**. 

[0 0 3 2] Ml lC*5^T, PC10L ±^zl U 5^>T 
* y- h^x-f 1 0 3, LAN104, i7^^T>hP 
CI 0 6, VPN10 8BB4tH«©t)©T»5. 

[0 0 3 3] Blfc^T, PC10L t+a'Jf-i' 
•y-h«?x^l03, i77-<7>hPClO60IP 

l:J:oTPCl 0 ltCfl^Snfcl P7HI/X) o * 
fc, I P s e cfiftt^iT^ I KEiimtdJcrK ir^n. 
'Jf^ -y-h^x<10 3H PC101CIP7H 10 
L^XDaW« LAN 1 0 4±<D9 5'( 7 > h P C 
106^f,VPN10 8^LTa^^y 3 tl 

tpc i o i iz i p/ty^ h*aim*r^*^ s-r^ 

-f 7>hPC 1 0 6K::fc^T, LAN1 0 4^T*yD 
M^ctoTPC 1 0 1 izmD^TZnti IP7HU 
XA^n^tf^, itfiTtl P7HI/^C, 25 
PTHUX^DOD I P/^yy h 1 0 9&ftf&Zn. 

mmznzo -fe^u^ • y-h^x-r 1 o 3**e<& 

/^7M0 9^ftL, VPN108^1^nfcPC 
1 0 \toX<Drt>ry h~?$>Z>Zi2&mWl~TZ>ti* IKE 20 
a«fcck*5SS«Lfc««KiafitJViT I P/tjry h 1 0 9 
**y-tU >^-T^o tc<0 I P7 KUXCD^ffiOtC, sim 
7CIP7HUXB, 3B$feI P7 Hl/XAcD I V\*y?ifi 

mnzn&o ^<Dt^mvrzmm\z&^xtty^j 

frtotl*. VPN1086*bTA7tU>ysnft^ 
iryhSgflbtPClOlIt £*LjfcW«K2K^ 

x*7 r -feu>i/sti&7coi p/iy^ h i o 9*mom 

-f >*£:7ttC I P/^y >y hi 09 ^ST^o 30 

[0 0 3 4] 0 2te-fe^'J^ • y-h^x-f 1 0 3 
^PCIOIICI P7 FUXD*K#"r*¥IH«:*t*:7 

[0 0 3 5] IPsecifl^fT^fc^CH 2 j£tfffl-T? 

bfcl^o ^(Dtz&lZ I KEffimte2 0<Z>:7x— 
tlT^T, 7x- XI fc£C>T££&I KE»<t€rfr 5 
fc&CO I KE-SA*flfo£L«fc-5<!:L (SI, S2) , 
-E-n^fig3»bfc6. 7x-X2i:*tit, IPsecI 

(S3) o 7x — X2X I P7 FI/XD^BMjU IP 
sec-SA^iSt^C^ttntf (S4) IKE 
iim£^7f£ (S5) o Xf77S30IKE C7x 
— X2) mm\Z^X I P s e cii«€rfT'5fe*JC2^ 

[0 0 3 6] UtiOi^^^HJg^^^intf, y-r 
t*7y^8ttTWAN 1 0 2l:gjgLfcPC 10 1C 
SLTIPsecyD h^JHCiOVPNl 0 8 
"t^BSL I P s e c iifitdflctiLO I KEilMRF^. DH 
CPilM^y->3>* I KEr- 3MC*fr&U h>*D 50 
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>^^n^: I H-fetf* I P s e cM31^tl^ 

iH«7t;I P7HUX©iS (7HI/XCTO 

<103H ^7^77y**l/fc*»0PC 1 0 1^ 
tIPs e ciHTT^R. f0PC<DlW^I P *" 
TFUXASfel^pJfgtCU, L AN 1 0 4ET<0*7< ^ 

7>h^*i o 6^<Dm.mttmt-i m z>z.twvgz><D- - 

[0 0 3 7] (Hfle<Z>}£fB 2 ) *%K03lf6<Z>?Bli 2 tC 
cfc£-fe*:xU5V • y-h^x-f ggtCfett^VPNffi 

«#tt;*B i ftjB^tiawt*. 

[0 0 3 8] HlfC&^T, IKEIfl(DRespon 
d e rt»St^Uf>f • y— h^x-f 1 0 3*^1 
n i t i a t o rt^PC 1 0 1 JCDH C Ptif?g£BE 
t*aUf>fy-b^x^l0 3ET© 
L AN 1 0 4«h|^i;t^>h(OI P7FUX, U-^* 
y h^X^SrBS^-r^c, VPN 1 0 8»4SC0 I P s e 
ciimtC^WC, VPN10 8±*«EtlS/^7hK^ 
tt, LAN 1 0 4^»*6»«f *PC 1 0 1 t>, t+ 
i'Jr>f • y-h^x-f 1 0 3ffiT<Z>^<7>FS5* 
1 0 6 h 7-?t^ > H±K»]0&K L#>t> 

[0 0 3 9] &±<D±o\Z*mm<DMmiZiLtl&* I K 

Eiifl^ic, -tr^u-x^ • y-h^x-r i o 3bht^ 

LAN 1 0 4 tmV±?*>b<D I P7Hl/7/*7* 

* F77^7 KUXt^Wy^i«*5LAN 1 
0 4tCT^-feXT^)PC 1 0 1 izmvmT. ftffl<DPC 
10 1 S^SMKlL AN 1 0 4SS^TJCg^fcVPNil 
m*^W$-Z>&O\Z\stzZ.£\Zlli0. VPN108« 
\L\,tz9Ym<DP C 1 0 IRAN 1 0 4 8R«rt«C**± 

fc**^SS^6L AN 1 0 4rt<0«*t£7^-fe*-r*H 

[0 0 4 0] mM<DBM 3 ) *5£W<DmM<DMm 3 
i4t+a'JT>r • y-h^x-f gglCiStt^VPNil 

[0 0 4 1] 0 1 IC&HT, -fe+a.UT'-f • y— h^x 
<103#NAT ( Net -work Addres 
s Translator) J$fi5£ffl -fc^zi U 5V 

• y- h^x-Y 1 0 3BET<0L AN 1 0 4^:^^^^- 
b I P7Hl/70^Tifi)ELT^fc«^ 
HANI 0 4±Oi7^^y>h^*l 0 6JC»47^1r 
Xttftlf^ ^W^y»KLfcPC lOltt 
*;xU5V -y-h^x-f 1 0 3#VPN1 08&m±L 
~?Z>tzft<D I KEilMO^T, -tr^rrU^-f • y— h»> 
x-f 1 0 3BHTOL AN 1 0 4-rttfflSnT^ty^ 

7F1/7SI KElCfi^AcDHCPt/ya >{CJ: 
0 PC 1 0 1 tcBE^-r^^lCcfcO, WAN 1 0 2±\Z 



( 6 ) 
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to 



£-5 VPN 1 0 8±\tifa— fVV I P7 KUXTitftL 
&7&<<E>. LAN 1041*3, fLTPC 1 0 1 <Dfo&>T' 
\t. b I P7 h9-^ty/> 

[0 0 4 2] £t±«)«tp»C2ls:^]6g©^liJCj;n«, NA 
Tfti^ffl^mSiOPC 1 0 1 IC LAN 1 0 4 
iHTTffifflLT^-Sy^-f "C— h I P7 FUX* I KE 
jiflBtlCtt^L. y^^-HPTKl/XT'IIStl 
ifcLAN 1 0 4mtk^<D?y&>fr < bC>T?±:Z&vJmti.V 10 
PNam^SI^-r-5«t^lcL^:Zl<»:tC«t 0. /H^- 
M P7 KI/Xti^nfcLAN 1 0 4Stl:> 3c£ 
&£«&L/i£$ttgB©PC 1 0 1 a^OT^-feX^nJ 

[0 0 4 3] 

[f£iE©$WI] W±I&lflLfc<£5lC#fE9§<Diit;fcJgl K 
ISSiO-t^iU^ • y-h^x-fSBIC^tt^VPN 

'j^w • y— h'i'x-r^etciitt^vpNjim^T'* 20 

oT. ^-f-^^T^y^T-WANtcSiitL^^gPOP 
CKttLT IPsec yph3JU:«tDVPN*HSt 
I P s e c il^tC^feiZlO I KEilffl^ftC. DHC 
Pjim^-y>3 >£ I KEf-^Ctt^t. h>*'J > 
ifZtltz I P/ty-j/ Hciitt-S I P s e c^g^tl-SiH 
«5cl PT-h'UT.wmS^^t-^.-ilC.fcD. -fe*x 

fl-g&OTPCi: I P s e cjffi{rr£B£. tOP CCDS^W 
te^eSfel P7 KUX^fM^liJfiglCL. LANgiTF©^* 

[0 0 4 4] W3fcJS2 {CfS«£>-fe*x'j7V •y-h'f 

x-rgBic^tt-svpNiim^tetcititt. w^iic 
ii«^aic*^T. iKEiim^Jc •fe+^'j^'C -y 

-^i<iiET®LANt|^i;tW>f-©I P7 

^5>LAN(C7i7-tXT-5^gP©PCicSiJD^T. n 
g|$<Z) P C Zfom&HZ L ANSgitTldfiUfc V P NilflS: 

nm.-rz>z.t\z£o. vpN*?(i:u3t^»opc*«L 40 



AN^rtJcs^>«k 5 Kisses ic^fr-r - <>:7&<T#-5© 

[0 0 4 5] «*^3lCgE«K>ir^xUT"^ • Y—bO 
x-fgBlci3tt^vPNilffl^fe{cj;n«, B^Sit: 
E«co-fe^i'J^-< • y-hCx-fg«tC*5lt-&VPN 

mmysmza^T. NAT^^iia^^-a-T^gpop 

CJCLANETTfiefflLTl^y^-f ^— h I P7HU 
X£ I KEfflft^MCtt-^U ^7-f^-HP7Hl/X 
"CJUSS nfc L A N ^^O^gP<0 P C > f, © 7 2 -t X 
*ipISg^VPNjl«$rl6S-r-5)Cli:(Cj;0. ^7^^- 
h I P7Hl/XTi^tlfcLANitl:, $:£14£?S 
ft L fc * *nSI5© P C a> e. © 7 Z tX^ pTHglCft-g. t «,» 

[0®Wffi*/«£^] 

[0 1 ] *5ZW0>mi&<DBm 1 lc:fctt& IPsec ilffi 
<DtKBS£5KTIftlW0 

[0 2] -tr+xDy-f • y- h^x-f7i^gi5©PC(r I 
P7 Kl^XSrBH^T-S^JH^^-r^D— ^-v — h 

[03] *&wo>mm(DMmi tc.t^ir^xU'x^ -y 

-h^x-f^BICiJ^^VPNjim^ffiJCiS^Tffll^ 

I KEjimx-^?*-^-;/ nes-r^*— v y 1-0 

[04] WAN£-&tf— f&W£*y h«7-^->xyASr 
[0 5] WANCiSgg^TWAN^i 

[0 6] \y> s e c mmmtth(Dtz^<D^=L*)y-^ ■ y 
[0 7] h>^ju^E-h*» i p s e cmmv>®m&7F.T 



[fft©Kli] 

10 1 PC 

102 WAN 

103 t+aUf-f • y-b'^x'f 
10 4 LAN 

1 0 5 -tf—ASHsfc 

1 0 6. 1 0 7 i75-fT>h^* (i'7-1'7>KP 
C) 

10 8 VPN 

10 9 I P/iy>y h 



[03] 

lKEr—9 300 





UDP 


ISAKMP 


ISAKMP 


ISAKMP 




ISAKMP 















[0 5] 




101 
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[01] 



[02] 



[04] 



IP7KUX:B 
103- 

D 











B 


A 













IPTW'XrA 



c 



108 



START 

in 



106- 



101 



104 



IP7KL<X:C 



[£ 



109 

/ 



101 PC 

103 *feU5^-^W*f8« 

104 LAN 

106 9y47>m*&5i7>h?Q 
108 VPN 
309 l?Mryh 



imei 



I 



[KE-SA*5 

I 



-SI 



-S2 



7x-x2m h" s3 

1 



IPsec-SA*4 |— S4 

1 



c 



END 



J 




( START ) 
— — i Sll 

iKE7x-xiae r 



[0 7] 





A 











IKE7x-X2fflg | — S13 



IKE7x-X2tiB!)(IPsec-SAff^V S14 i 0 6- 



I IPsecaiiis* 

7=i=r 



v- 

104 



~S15 



IP7hVX:C [c 



108 



100 

/ 



*101 



7P> h^—iSO)^ 

F I (##) 
11/00 310 C 



F* — A(##) 5J104 AA01 AA16 EA01 EA04 JA21 

NA02 PA07 

5K030 GA15 HC01 HC13 HD03 HD08 

HD09 LD19 

5K033 BA04 CB08 DA06 DB14 DB18 

5K051 BB02 CC01 GG02 HH18 

9A001 CC08 JJ25 LL03 
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